CVE-2025-48246 WordPress The Events Calendar <= 6.11.2.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Events Calendar: from n/a through 6.11.2.1...

CVE-2025-48246 WordPress The Events Calendar plugin <= 6.11.2.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.11.2.1...

CVE-2025-48242 WordPress Legal Pages plugin <= 1.4.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Legal Pages: from n/a through = 1.4.5...

CVE-2025-48242

CVE-2025-48242 describes a Missing Authorization (Broken Access Control) vulnerability in WordPress plugin Legal Pages, affecting versions up to 1.4.5. The issue lies in incorrectly configured access control, enabling unauthorized access due to insufficient authorization checks. Public references...

CVE-2025-48242 WordPress Legal Pages plugin <= 1.4.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Legal Pages: from n/a through = 1.4.5...

WordPress Spiritual Gifts Survey plugin <= 0.9.10 - Unauthenticated CSRF to XSS vulnerability

Unauthenticated CSRF to XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Spiritual Gifts Survey versions = 0.9.10...

WordPress eaSYNC plugin < 1.3.15 - Subscriber+ PayPal Settings Update vulnerability

Subscriber+ PayPal Settings Update vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin eaSYNC versions 1.3.15...

WordPress Event Calendar plugin <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion vulnerability

Unauthenticated Arbitrary Calendar Deletion vulnerability discovered by Bob Matyas in WordPress Plugin Event Calendar versions = 1.0.4...

WordPress JavaScript Logic plugin <= 0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Daniel Ruf in WordPress Plugin JavaScript Logic versions = 0.1...

WordPress Widgets Reset plugin <= 0.1 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Widgets Reset versions = 0.1...

WordPress Custom Author Base plugin <= 1.1.1 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Custom Author Base versions = 1.1.1...

WordPress EventPrime plugin < 3.5.0 - Subscriber+ Arbitrary booking settings update vulnerability

Subscriber+ Arbitrary booking settings update vulnerability discovered by caon in WordPress Plugin EventPrime versions 3.5.0...

WordPress Bux Woocommerce plugin <= 1.2.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ch4r0n in WordPress Plugin Bux Woocommerce versions = 1.2.3...

CVE-2025-31063 WordPress Wishlist plugin <= 2.1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in redqteam Wishlist wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist: from n/a through = 2.1.0...

CVE-2025-31065

CVE-2025-31065 affects Rozario WordPress theme versions up to 1.4 (themeton Rozario). Public docs describe a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access control levels. CVSS v3.1 base score 5.3 (Medium). No confirmed public fix version is provi...

CVE-2025-31066 WordPress Acerola theme <= 1.6.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in themeton Acerola acerola allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acerola: from n/a through = 1.6.5...

CVE-2025-31066

CVE-2025-31066 relates to a Missing Authorization vulnerability in the Themeton Acerola WordPress theme (versions &lt;= 1.6.5). The issue stems from incorrectly configured access control levels, enabling unauthorized access (Broken Access Control). Public sources (Patchstack, CVE listings) consis...

CVE-2025-31630 WordPress The Business <= 1.6.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in themeton The Business allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-31630 WordPress The Business <= 1.6.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in themeton The Business allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-31071 WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4...